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This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1 1. (currently amended) A method by which a mobile 

2 subscriber with a WAP-enabled terminal can access a WEB or WAP 

3 server, comprising the steps of: 

4 said terminal sending a request for said server to a WAP 

5 gateway, wherein encryption in the wireless 

6 interface between said WAP-enabled terminal and said 

7 gateway is based on WTLS (Wireless Transport Layer 

8 Security) , and wherein an encryption protocol used 

9 by said server is based on one or both of the SSL 

10 and/ or the TLS security protocol; and 

11 converting between WTLS and said one or both of the SSL 

12 and/ or the TLS security protocol in a secured domain 
;13( of said server administrated by an administrator, 

14 wherein WTLS encrypted packets sent by "skid terminal are 

15 routed by said gateway to said secured domain 

16 with out said gateway decrypting less than all of the 

17 encrypted packets transported during a session. 

1 2. (previously presented) Method according to claim 1, 

2 wherein said gateway routes said packets to a proxy in said 

3 secured domain, said proxy using at least one protocol layer 

4 of the WAP protocol . 

1 3. (currently amended) Method according to claim 2, 

2 wherein said packets are routed according to one or both of 

3 the URL and/ or the domain name of the requested page in said 

4 gateway. 

1 4. (currently amended) Method according to claim 2, 

2 wherein said packets are routed by said gateway according to 
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3 the a port number embedded in said packets, in said gateway — - 

1 5. (previously presented) Method according to claim 4, 

2 wherein said encrypted packets are routed according to 

3 different port numbers to different secured domains. 

1 6. (currently amended) Method according to claim 4, 

2 wherein said port number [ [s] ] arc is extracted in an 

3 application layer of said gateway from the URL of the 

4 requested page. 

1 7. (original) Method according to claim 6, wherein said 

2 port number is extracted from only a restricted number of 

3 packets during a session, and wherein the routing of at least 

4 one of the following packets depends on this extracted port 

5 number . 

t 8. (currently amended) Method according to claim 7, 

2 wherein a proxy server in said secured domain extracts one or 

3 ■- both of the URL and/ or the port number of the received packets 

4 and wherein the proxy server sends back a command to said 

5 gateway if it receives a packet with a different one or both 

6 of an URL and/ or a port number. 

1 9. (previously presented) Method according to claim 4, 

2 wherein said port number is extracted from said URL of the 

3 required web page in said terminal. 

1 10. (previously presented) Method according to claim 9, 

2 wherein said port number is extracted by a browser from said 

3 URL of the required web page. 

1 11. (original) Method according to claim 8, wherein the 

2 browser in said terminal only copies said port number in said 



Amendments to the Claims 



Page 3 of 14 



Appl. No. .09/592,91 6 

Amdt. Dated November 5, 2004 

Reply to Office action of July 1 , 2004 

3 packets if an end-to-end secured connection is requested. 

1 12. (original) Method according to claim 3, wherein said 

2 packets in said gateway are routed to a secured domain if said 

3 port number is comprised in a predefined range. 

1 13. (previously presented) Method according to claim 3, 

2 wherein said gateway sends a redirect command to said terminal 

3 if an end-to-end secured connection is requested. 

1 14. (previously presented) Method according to claim 13, 

2 wherein said redirect command is time-limited. 

1 15. (currently amended) Method according to claim 13 , 

2 wherein a proxy server in said secured domain extracts one or 

3 both of the URL and/ or the port number of the received packets 

4 and sends a redirect command back to said terminal as soon as.. 

5 the session is to be routed to said gateway. 

1 16. (original) Method according to claim 13, wherein sai'd 

2 redirect command contains a forwarding address which is 

3 extracted from a document made accessible by said WEB or WAP 

4 server. 

1 17. (original) Method according to claim 13, wherein said 

2 redirect command contains a document which includes the 

3 forwarding address. 

1 18. (currently amended) A method by which a mobile user 

2 with a WAP-enabled terminal can access a WEB or WAP server, 

3 said method comprising the steps of: 

4 said terminal sending a request for said server to a WAP 

5 gateway, wherein a browser in said terminal extracts 
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6 the port number of the demanded WEB or WAP page and 

7 copies it to packets sent to said gateway; and 

8 routing said packets , using 4tt said gateway^ according to 

9 this port number. 

1 19. (currently amended) A gateway comprising: 

2 means for receiving packets WTLS- encrypted according to 

3 the WTLS protocol from WAP-enabled terminals; 

4 means for converting said packets into SSL-encrypted 

5 requests; and 

6 means for transmitting said SSL - encrypted requests to a 

7 receiving server, wherein said gateway can recognize 

8 WTLS -encrypted packets that are to be sent on 

9 transparently and can convert said WTLS -encrypted 

10 packets into said SSL-encrypted request without 

11 decrypting the information contained in said WTLS- 

12 encrypted packets. 

1 2 0. (currently amended) Gateway according to claim 19, 

2 wherein said WTLS -encrypted packets are routed according to 

3 one or both of the URL and/ or the domain name of the requested 

4 page . 

1 21. (previously presented) Gateway according to the claim 

2 19, wherein said WTLS -encrypted packets are routed according 

3 to the port number of the requested page . 

1 22. (previously presented) Gateway according to claim 21, 

2 wherein said WTLS -encrypted packets are routed to 

3 different secured domains according to different 

4 port numbers . 

1 23. (previously presented) Gateway according to claim 21, 

2 wherein said port number is extracted from the URL of the 
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3 requested page in an application layer of said gateway. 

1 24. (previously presented) Gateway according to claim 21, 

2 wherein 

3 said port number is extracted during a session only from 

4 a restricted number of WTLS- encrypted packets, and 

5 wherein 

6 the routing of at least one following WTLS -encrypted 

7 packet depends on said extracted port number. 

1 25. (currently amended) A method by which a terminal can 

2 access a server, said method comprising the steps of: 

3 said terminal sending a request for said server to a 

4 gateway, wherein security utilized between said 

5 terminal and said gateway is based on a first 

6 security protocol, said first security protocol 

7 including an encryption; 

8 securing said server. with a second security protocol, 

9 said second security protocol also including an 

10 encryption; and 

11 converting between said first and said second security 

12 protocol in a secured domain of said server 

13 administrated by an administrator or in said 

14 gateway , wherein 

15 encrypted packets sent by said terminal are routed by 

16 said gateway to said secured domain without said 

17 gateway decrypting all of the packets transmitted 

18 during a session. 

1 26. (previously presented) A method for performing end- 

2 to-end secure data transfer between a terminal and a server, 

3 wherein said terminal is connected to said server via a 

4 wireless connection between said terminal and a gateway, said 

5 method comprising the steps of: 
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6 said terminal requesting a secure communication session 

7 with said server via said gateway, said requesting 

8 including the steps of : 

9 said terminal generating a request including request 

10 packets encrypted using a WTLS protocol, 

11 said terminal sending said request to said gateway, 

12 said gateway forwarding said request to said server 

13 or to another server, wherein said gateway does 

14 not decrypt all of said request packets, and 

15 said server or said another server decrypting some 

16 number of said request packets using said WTLS 

17 protocol; 

18 and 

19. said server or said another server serving data to said 

20 terminal via said gateway, said serving including 

21 the steps of: ' y ' 

22 said server ^or^said another server sending said data 

23 including data packets encrypted using said 

24 WTLS protocol to said gateway ; 

25 said gateway forwarding said data packets to said 

26 terminal, wherein said gateway does not decrypt 

27 all of said data packets; and 

28 said terminal decrypting said data packets using 

29 said WTLS protocol . 

1 27. (previously presented) The method of claim 26, 

2 wherein said gateway must decrypt some but not all of said 

3 request packets to forward said request to said server or said 

4 another server. 

1 28. (previously presented) The method of claim 27, 

2 wherein said gateway must decrypt some but not all of said 

3 data packets to forward said data to said terminal . 
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1 29. (previously presented) The method of claim 26, 

2 wherein a browser on said terminal provides information to 

3 said gateway for forwarding said request to said server or 

4 said another server without said gateway decrypting any of 

5 said request packets. 

1 30. (previously presented) The method of claim 29, 

2 wherein said information includes one or more of: a port 

3 number, a domain name, and an URL. 

1 31. (previously presented) A system for performing end- 

2 to-end secure data transfer between a terminal and a server, 

3 said system comprising: 

4 a gateway adapted for receiving a request for a secure 

5 session with said server from the terminal, wherein 

6 said request includes. request packets encrypted 

7 using a WTLS protocol, and wherein said gateway is 

8 also adapted for forwarding, said request to said 

9 server or to another server, wherein said gateway 

10 does not decrypt all of said request packets for 

11 performing said forwarding; 

12 said server or said another server adapted for decrypting 

13 some number of said request packets using said WTLS 

14 protocol and also adapted for serving data including 

15 data packets encrypted using said WTLS protocol to 

16 said gateway, wherein 

17 said gateway forwards said data to said terminal without 

18 decrypting all of said data packets, and wherein 

19 the terminal decrypts said data packets using said WTLS 

20 protocol . 

1 32. (previously presented) The system of claim 31, 

2 wherein said gateway must decrypt some but not all of said 
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3 request packets to forward said request to said server or said 

4 another server. 

1 33. (previously presented) The system of claim 32, 

2 wherein said gateway must decrypt some but not all of said 

3 data packets to forward said data to the terminal . 

1 34. (previously presented) The system of claim 32, 

2 wherein a browser on the terminal provides information to said 

3 gateway for forwarding said request to said server or said 

4 another server without said gateway decrypting any of said 

5 request packets. 

1 35 (previously presented) The system of claim 34, wherein 

2 said information includes one or more of a port number, a 

3 domain name, and an URL. 
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